---
version: "3.8"

services:
  app:
    secrets:
      - oauth_key
    environment:
      - Accounts_OAuth_Custom-Keycloak=true
      - Accounts_OAuth_Custom-Keycloak-url=https://${KEYCLOAK_DOMAIN}/auth
      - Accounts_OAuth_Custom-Keycloak-token_path=/realms/${KEYCLOAK_REALM}/protocol/openid-connect/token
      - Accounts_OAuth_Custom-Keycloak-token_sent_via=Header
      - Accounts_OAuth_Custom-Keycloak-identity_token_sent_via=header
      - Accounts_OAuth_Custom-Keycloak-identity_path=/realms/${KEYCLOAK_REALM}/protocol/openid-connect/userinfo
      - Accounts_OAuth_Custom-Keycloak-authorize_path=/realms/${KEYCLOAK_REALM}/protocol/openid-connect/auth
      - Accounts_OAuth_Custom-Keycloak-scope=openid
      - Accounts_OAuth_Custom-Keycloak-id=${KEYCLOAK_CLIENT}
      - Accounts_OAuth_Custom-Keycloak-login_style=redirect
      - Accounts_OAuth_Custom-Keycloak-button_label_text=Login via Keycloak
      - Accounts_OAuth_Custom-Keycloak-button_label_color=#FFFFFF
      - Accounts_OAuth_Custom-Keycloak-button_color=#13679A
      - Accounts_OAuth_Custom-Keycloak-username_field=preferred_username
      - Accounts_OAuth_Custom-Keycloak-merge_users=false
      - OAUTH_KEY_FILE=/run/secrets/oauth_key

secrets:
  oauth_key:
    external: true
    name: ${STACK_NAME}_oauth_key_${SECRET_OAUTH_KEY_VERSION}